How to prohibit others from installing programs that affect computers on their own computers

I use resources on a school public computer, but I often find that some people use computers to install games and other programs, such as QQ and Other Combat Games, which greatly affects our work. however, it is hard to say on the face. sometimes it brings a lot of viruses to the computer, so I want to make some settings on the computer, so that others can only perform some formal use when using the computer? Now we have a solution. You can try it as follows.
Use the Software Restriction Policy of windows xp to start -- run -- GPEDIT. MSC -- OK, open the Group Policy Editor, expand computer configuration> windows Settings> Security Settings> Software Restriction Policy> other rules, right-click the window on the right, and select a new hash rule, click Browse, find the game executable file, and set its security level to not allowed, we recommend that you do this for all applications under the game directory (if you think it is more secure to do this for all files under the game directory, this prevents invalid rules after the game update package is downloaded because the rule is based on the file content. As long as the file content is changed, the policy becomes invalid, I don't think there will be a game that updates all the game files at a time.) In the future, no matter What disk or directory he puts the game under, it won't be running on windows.
The above friend's method can also restrict the running of the program, but once the installation directory of the game is changed to another folder, this method will not work.
Another method:
Enter gpedit. msc
Expand "user configuration", "management template", and "system" projects in the window, and in the subwindow on the right of the corresponding "system" project, double-click the "do not run the specified windows application" option. In the displayed window, select the "enabled" option. Then, you will see that the "show" button is automatically activated in the corresponding window, click the "show" button, and then click the "add" button in the subsequent window, enter the name of the application to be run in the Add settings box, and click OK;
Method 3, 1
-Internet option-security-Custom Level-File Download-Disable
2
In Windows XP:
The Guest account allows others to use your computer, but does not allow them to access specific files or install software.

3. Run gpeditmsc to open the Group Policy. Open the windows component in the management template. There is a windows installation service. You can check the content on the right. The specific method is as follows: run gpeditmsc-> Computer Configuration-> management template-> windows Components-> ms installer-> enable "Disable ms installer" and "Disable User installation"

Double-click "Disable Windows Installer" in the right window of Windows Installer and select "enabled". Click "OK ".

Enable policy: Disable "Add/delete programs", and then enable the following policy: console-user configuration-management template-System "-" run only licensed Windows Applications ", in the "allowed applications list", "add applications that are allowed to run and restrict the programs that you run ."

You can set limits in the Group Policy, but as long as the user can enter the Group Policy, he can still install the file. After the method is set to enter the Group Policy, go to user permission settings and find the installation file to delete all user names.

4
On my computer ---- right-click "manage" ----- open services and services in applications ------ search for Windows Installer on the right ----- double-click "open" to change the Startup Type to Disabled
In this way, most installation programs cannot be installed, because it will disable all the installation programs that need to call windows installer, especially those * msi cannot be installed.

5
In the user account on the control panel, create an account and do not grant the installation permission. When you want to install the account, right-click it and choose "run this installer with the Administrator account, this method is also used to run some programs that want to modify system files.

Enter the Administrator account:
Gpedit. msc-Computer Configuration-WINDOWS Settings-Security Settings-user permission assignment the following loader and uninstall programs allow Trust to delegate

Method 4>

We recommend that you try the software "ice shield system security expert.
Reference: I saw it in computer puzzles. I also used it very well.
Method 4, best
I. run gpedit. msc opens the Group Policy, opens the windows component in the management template, there is a windows installation service, take a look at the right side of the thing, the specific method: Run gpedit. msc-> Computer Configuration-> management template-> windows Components-> ms installer-> enable "Disable ms installer" and "Disable User installation"